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REMARKS 

A review of the claims indicates that: 

A) Claims 2 — 16, 33 — 39 and 58 — 71 remain in their original form. 

B) Claims 1 7—3 1 , 40—5 5 and 72—85 are withdrawn. 

C) Claims 1 , 32, 56 and 57 are currently amended. 

In view of the following remarks, Apphcant respectfully requests allowance 
of the non-withdrawn claims. 
Claim Oblections 

The Applicant has amended several claims in accordance with the Patent 
Office's suggestions. 

Traversal of the ^103 Rejections 

Claims 1—6, 9, 10, 32—36, 38, 39 and 56—65 stand rejected under 35 
U.S.C. § 103(a) as being unpatentable over US 2003/0105980, hereinafter 
"Challener" in view of U.S. Pat No. 7,205883, hereinafter "Bailey." In response, 
the Applicant respectfully traverses the rejection. 

Claim 1 recites a method comprising: 

• creating a data structure including a plurality of user id-user key 
pairs, each user id-user key pair comprising a user id associated with 
one of a plurality of users and a user key comprising a master key 
and a keyed-hash message authentication code encrypted using a 
password associated with the one of the plurality of users; and 

• delivering the data structure to one or more of the plurality of users. 

Claim 1 has been amended to recite that the user key comprises "a master 
key and a keyed-hash message authentication code". Claim 1 in its original 
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condition recited that the user key comprised "a master key." Additionally, Claim 
10, now cancelled, originally recited the restriction that the user key included the 
"keyed-hash message authentication code". Claim 1 as amended combines these 
recitations. The Applicant respectfully submits that the prior art of record does not 
teach or suggest encryption of a user key comprising a master key and a keyed- 
hash message authentication code, as recited. 

Claim 1 recites that the user key is an encryption of the master key and the 
HMAC (keyed-hash message authentication code, see Applicant's specification at 
page 14, line 19 and other locations). Thus, two elements are combined to form 
the user key. The prior art fails to teach or suggest such a combination. 

The Patent Office supported the Section 103 rejection of Claims 1 and 10 
using sections of the Challener and Bailey references. In response, the Applicant 
will discuss both references. The Bailey reference was not cited by the Patent 
Office as teaching a user key comprising a master key and a keyed-hash message 
authentication code. The Applicant concurs that Bailey fails to teach these 
aspects, as recited. In view of the discussion below, the Applicant submits that the 
Challener reference fails to remedy the deficiency of Bailey. 

At paragraph [0019], Challener teaches that a signed phrase can be created 
with a private key of a public/private key pair. The signed phrase can then be 
loaded into a table similar to Challener' s table 100 in FIG. 1. The phrase can be 
any text or string. Thus, Challener teaches association of a user ID and a signed 
string. In operation, Challener teaches (block 414 at FIG. 4) that the phrase (text 
or string) is signed by the security chip and compared to the table. If there is a 
match, then the remote user is granted access. Thus, Challener teaches that a 
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signed phrase (allegedly an authentication code) can be associated with a user ID 
(but not a user key, as recited). Thus, Challener fails to teach or suggest that an 
authentication code can be associated with a user key. That is, Challener fails to 
teach or suggest a user key comprising a master key and an authentication code. 
In particular, Challener does not teach or suggest a user key comprising a master 
key and a keyed-hash message authentication code that are encrypted using a 
password. 

The Patent Office suggests that Challener teaches a keyedrhash message 
authentication code at paragraph [0019]. The Applicant respectfully disagrees that 
[0019] actually teaches a user key comprising (a master key and) a keyed-hash 
message authentication code . Instead, the Applicant respectfiilly submits that 
Challener teaches an association between a user ID and an authentication code, 
and not a user key comprising an authentication code . 

In particular, the Applicant submits that Challener fails to teach or suggest, 
"a user key comprising a master key and a keyed-hash message authentication 
code" as recited. That is, Challener fails to teach or suggest a user key that 
comprises two things, wherein the two things are then encrypted, as recited by 
Claim 1. 

Referring to Challener at [0019], Challener teaches that a table similar to 
table 100 in FIG. 1 of Challener could be constructed, wherein the entries would 
include user IDs and signed phrases. Thus, Challener teaches an association 
between a user ID and an authentication code. No teaching of a user key 

comprising a master key and an authentication code is taught. Instead, Challener 
teaches association of an authentication code and a user ID, not "a user key 
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comprising a master key and a keyed-hash message authentication code" as recited 

by Claim 1 . 

The Apphcant respectfully submits that Claim 1 recites elements not taught 
or suggested by Challener and Bailey, and requests that the Section 103 rejection 

be removed. 

Claims 2 — 9 and 11 — 16 depend from Claim 1 and are allowable as 
depending from an allowable base claim. These claims are also allowable for their 
own recited features that, in combination with those recited in Claim 1, are neither 
disclosed nor suggested in references of record, either singly or in combination 
with one another. Accordingly, the Applicant respectfully requests that the 
Section 103 rejection of these claims be removed. 

Claims 32, 56 and 57 are allowable for at least the reasons that Claim 1 is 
allowable. These claims have been amended in a manner consistent with original 
Claims 10, 39 and 65 to recite, "a user key comprising a master key and a keyed- 
hash message authentication code encrypted using a password associated with the 
one of the plurality of users." or similar. Accordingly, the Applicant respectfully 
requests that the Section 103 rejection of these claims be removed. 

Claims 33 — ^38 and 58 — 71 depend firom Claims and 32 and 57, and are 
allowable as depending from an allowable base claim. These claims are also 
allowable for their own recited features that, in combination with those recited in 
Claims 32 and 57, are neither disclosed nor suggested in references of record, 
either singly or in combination with one another. Accordingly, the Applicant 
respectfully requests that the Section 103 rejection of these claims be removed. 

ConclHsion 
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The Applicant submits that all of the claims are in condition for allowance 
and respectfully requests that a Notice of Allowability be issued. If the Office's 
next anticipated action is not the issuance of a Notice of Allowability, the 
Applicant respectfiilly requests that the undersigned attorney be contacted for the 
purpose of scheduling an interview. 

Respectfully Submitted, 
Dated: t-''^'^0"7 By: 

Reg. No. 37,954 
Attorney for Applicant 

LEE & HAYES PLLC 
Suite 500 

421 W. Riverside Avenue 
Spokane, Washington 99201 

Telephone: 509-324-9256 x235 
Facsimile: (509) 323-8979 
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